CVEs published in December 2006
779 vulnerabilities, 90 critical, 0 exploited.
- avg antivirus plus firewall, comodo personal firewall, infoprocess antihook +2 more +4 moreSoft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB...7.2 High
- comodo personal firewall, avg antivirus plus firewall, infoprocess antihook +2 more +4 moreFilseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify...7.2 High
- comodo personal firewall, avg antivirus plus firewall, infoprocess antihook +2 more +4 moreComodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a...7.2 High
- avg antivirus plus firewall, comodo personal firewall, infoprocess antihook +2 more +4 moreAVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a...7.2 High
- infoprocess antihook, avg antivirus plus firewall, comodo personal firewall +2 more +4 moreAntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process,...7.2 High
- microsoft project serverprojectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated...6.5 Medium
- w00t gallery galleryindex.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one...6.0 Medium
- mxbb activity games modulePHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games ...7.5 High
- debian linux, thomas lange fully automated installation +1 moreThe save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2,...1.9 Low
- phpalbum.net phpalbumDirectory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when...6.8 Medium
- phpmycmsPHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers...7.5 High
- barmanPHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote...7.5 High
- alientrap nexuizclientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to ...7.5 High
- alientrap nexuizNexuiz before 2.2.1 allows remote attackers to cause a denial of service (resource exhaustion or...5.0 Medium
- hp proliant integrated lights out, proliant integrated lights out 2 +1 moreUnspecified vulnerability in SSH key based authentication in HP Integrated Lights Out (iLO) 1.70...7.5 High
- ibm tivoli identity managerThe Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager ...2.7 Low
- clarens jclarensMultiple SQL injection vulnerabilities in Clarens jclarens before 0.6.2 allow remote attackers to...7.5 High
- dws systems inc. sql-ledgerlogin.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to...7.5 High
- torrentfluxDirectory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote...6.5 Medium
- yahoo messengerBuffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo...9.3 High
- microsoft windows explorer, windows xp +1 moreexplorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted...4.3 Medium
- microsoft windows xp, windows media player +1 moreWindows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote...4.3 Medium
- torrentfluxCross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote...6.0 Medium
- torrentfluxmaketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary...6.0 Medium
- torrentflux, torrentflux torrentflux-b4rt +1 moreDirectory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2)...6.5 Medium
- hilgraeve hyperaccessArgument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to...6.8 Medium
- hilgraeve hyperaccessHyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands...6.8 Medium
- scriptmate user managerMultiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote...7.5 High
- scriptmate user managerSQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows...7.5 High
- phpbb amazonia modPHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows...7.5 High
- php bloqMultiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to...7.5 High
- exlorPHP remote file inclusion vulnerability in fonctions/template.php in EXlor 1.0 allows remote...7.5 High
- php ar memberscriptPHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote...7.5 High
- apache ofbiz, opentaps +1 moreCross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open...6.8 Medium
- apache ofbizThe forum implementation in the ecommerce component in the Apache Open For Business Project ...7.5 High
- apache ofbizCross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component...6.8 Medium
- vblogMultiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc...7.5 High
- mozilla firefoxThe Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local...6.4 Medium
- italkplusMultiple buffer overflows in italkplus (Italk+) before 0.92.1 allow remote attackers to cause a...10.0 High
- scriptmate user managerScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information...7.5 High
- scriptmate user managerMultiple cross-site scripting (XSS) vulnerabilities in ScriptMate User Manager 2.1 and earlier...6.8 Medium
- vernet loic php debugPHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0...7.5 High
- scriptphp pronewsadmin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items,...6.4 Medium
- microsoft internet information server, internet information services +1 moreMicrosoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for ...4.4 Medium
- microsoft internet information servicesMicrosoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non...7.5 High
- neocrome land down under, seditio +1 moreSQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows...6.8 Medium
- goldenftpserver golden ftp serverHeap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to...7.5 High
- brian drawert yaplapPHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin...7.5 High
- mantisMantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History),...5.0 Medium
- citrix access gatewayUnspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced...6.0 Medium
- Show moreLoading…